[one-users] How to allow regular users to login to the cloud remotely, safely and using the cloud concurrently?

[Daniel Molina]

Hi,

The OpenNebula user creation must be done by oneadmin. If you don't
want to use the OpenNebula CLI commands you should implement an
application for managing the account creation, for example a portal or
maybe extend the Sunstone implementation [1].

Also you could extend one of the Public Cloud implementation  (OCCI
[2,3] and EC2 [4,5] interfaces). The users will be able to access the
cloud using a client that will interact with OpenNebula through a
server, allowing multiple users at the same time

[1] Sunstone: http://www.opennebula.org/documentation:rel2.2:sunstone

[2] OCCI Service Configuration:
http://www.opennebula.org/documentation:rel2.2:occicg
[3] OCCI User Guide: http://www.opennebula.org/documentation:rel2.2:occiug

[4] EC2 Service Configuration
http://www.opennebula.org/documentation:rel2.2:ec2qcg
[5] OpenNebula EC2 User Guide
http://www.opennebula.org/documentation:rel2.2:ec2qug

Hope this helps.

On 5 May 2011 18:21, Anders Branderud <anders.branderud at gmail.com> wrote:
> Hello again!
>
> I solved the other problem. I was expecting that the user should be asked to
> give a password when logging in to OpenNebula through the oneadmin-account,
> but apparently this wasn't the case. I succeed to login as another user
> through the oneadmin-account.
>
> Could you give me any ideas of what's the best way to implement this (I am
> doing a bachelor's thesis) [I know how to implement most of the below and I
> will ask specifically after the following paragraphs what I need help with.
> Problem description that I have written):
>
>> ICT at Royal Institute of Technology [KTH]- a university of Stockholm in
>> Sweden - have 16 computers that they are not using, which they bought from
>> PDC at KTH couple of years ago. One of the goals is to install OpenNebula
>> [explained below] on them all, with one of the computers being the front
>> end. I call this cluster of nodes Cloudelia.
>>
>> The system should follow the following requirements:
>> In this system we have administrators and ordinary users (‘user’). The
>> administrators have the right to grant other KTH users the privilege to
>> become administrators. In order for a user to use the system, authentication
>> needs to be done to ensure that it has a KTH-account. When an administrator
>> sees an get permission-request from an user and is deciding on whether to
>> approve the user or not, it must be able to rely on than an
>> authentication-mechanism ensures that the user really is the user with the
>> specific KTH-user name shown in the interface. This ensures that any user
>> outside of KTH with an intent to use Cloudelia in a malicious way doesn’t
>> get access to the system.
>>
>> An administrator is presented with information of all KTH-users that have
>> requested and are waiting for to get permission to use OpenNebula for a
>> certain course. The administrator can grant permission to any number of
>> these users at a time, and upon granting permission these users will get
>> access to Cloudelia as Open Nebula-’regular users’ [explained below] using
>> the login details they provided upon requesting permission to Cloudelia. An
>> administrator can see a list of all the users of a certain course and can
>> change the permission rights of an user.
>>
>> The described procedure of handling the accounts reduces the work load of
>> the administratiors. One advantage is that they don’t need to set up
>> accounts for each user one at a time, by manually assigning them user names,
>> passwords and entering the commands required in OpenNebula for creating an
>> Open Nebula-regular user.
>
>
>>
>> [More information of my proposed solution is found here: Link]
>
> More specifically I wonder how to solve this:
> When the administrator has approved a student to get permission to access
> the cloud, and his/her OpenNebula account including password has been
> created: How should the student access the cloud? Could you suggest to me a
> safe way that can handle multiple users at the same time?
>
> The cloud stands in a server hall, so the user should access the cloud
> through some remote access.
> How do I allow the user to get access to the cloud when he/she provides
> his/her username and password.
>
> What kind of interface for the user to provide his/her username and password
> is the smoothest solution?
> Many users will access the cloud at the same time.
>
> Thanks for your help!
>
> --Kind Regards, Anders Branderud
>
> [Personal blog] www.proofexistencegod.com  : Logical reasons - based on
> scientific premises - for the existence of a Creator and that He hasn't left
> His sapient creatures without an Instruction Manual - Torah ['books of
> Moses'] - to ascertain, and aspire to, His purpose.
>
> [Company] Anders Branderud IT Solutions - www.abitsolutions.org
>
> _______________________________________________
> Users mailing list
> Users at lists.opennebula.org
> http://lists.opennebula.org/listinfo.cgi/users-opennebula.org
>
>



-- 
Daniel Molina, Cloud Technology Engineer/Researcher
Major Contributor
OpenNebula - The Open Source Toolkit for Cloud Computing
www.OpenNebula.org | dmolina at opennebula.org